CVE-2019-12901

CVE-2019-12901 is a path traversal vulnerability in Pydio Cells versions prior to 1.5.0. It allows a low-privileged attacker to upload and delete files or folders outside their authorized directory, leading to privilege escalation. This vulnerability has a high CVSS score of 8.8, indicating a severe impact with high confidentiality, integrity, and availability compromise, and can be exploited remotely with low attack complexity. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.